Live data from Hacker News

€54k spike in 13h from unrestricted Firebase browser key accessing Gemini APIs

discuss.ai.google.dev

1–10 of 325 posts

Re: €54k spike in 13h from unrestricted Firebase browser key accessing Gemini APIs

#2
That's fucking bonkers that nothing in the system could see this as unusual and worthy of throttling. The embarrassment of this -- that a company LITERALLY SELLING machine learning services and expertise -- cannot spot such a thing... This should have led them to deal with this internally and refund it. Just... Wow Google.

Re: €54k spike in 13h from unrestricted Firebase browser key accessing Gemini APIs

#5

i have seen this so many times... i'm thinking it's time we replaced api keys. some type of real time crypto payment maybe?

Oh please no. And the "alternatives" to API keys aren't going to help much either, they'll just add friction to getting started (as reference: see the pain involved in writing a script that hits gmail or calendar API)

Re: €54k spike in 13h from unrestricted Firebase browser key accessing Gemini APIs

#6
post #2

That's fucking bonkers that nothing in the system could see this as unusual and worthy of throttling. The embarrassment of this -- that a company LITERALLY SELLING machine learning services and expertise -- cannot spot such a thing... This should have led them to deal with this internally and refund it. Just... Wow Google.

there is no way to cap your billing on gcp.

you can get notifications but that's it.

i don't want to get throttled below my quota but some type of spend limit would be good.

Re: €54k spike in 13h from unrestricted Firebase browser key accessing Gemini APIs

#8

i have seen this so many times... i'm thinking it's time we replaced api keys. some type of real time crypto payment maybe?

Prepaid only is a fantastic idea, especially for dumb-ass startups. Limiting your liability to $100 or so sound like a big-ass W.
Post reply on HN